nuget.exe 1.6 credentials never accepted (now fixed in 1.7...but:)

I have a nuget 1.6 server running our own package source as per the documentation. The server is running on IIS6 over SSL with AD domain authentication.

Everything is working fine from the NuGet package manager or when viewing packages in a web browser, however I am running into problems with nuget.exe. I am doing this using the new package restore feature.

If I try nuget.exe sources it shows our package source as enabled with the same URL that is working in the package manager and browser.

If I try nuget.exe list it prompts for credentials to authenticate, but never accepts them. I have tried both
domain\user and user with no luck.

If I try a MSBuild from a clean checkout, I can see it's not specifying the source or passing or requesting credentials:

Before I raise an issue, is there something basic I'm missing in how to set this up? nuget.exe version is 1.6.21205.9031.

Do I need to save my (hopefully encrypted) credentials somewhere? I couldn't see anything in the docs about specifying -Username or -Password options. Note that our goal is to have package restore baked into our release process on our build server, which
is authenticated through a domain service account. Hopefully that's doable.

However, I tried a build locally (we have everything stored in subversion) and nuget.exe via MSBuild did work from the nuget server on my own dev box (Win7 with IIS7 no SSL or AD), so it's something related to our Win2003 server, IIS6, SSL or AD authentication
:)

We're only experimenting with nuget at the moment, and I ran into some issues with package restore from a clean checkout and build (for content files, not lib references) , so I'm happy to keep learning/testing and wait until 1.7 is released and then
try again on our proper server.

Ok, just tried the 1.7 version of nuget and things are working a lot better, thanks!

I can now use the default URL from our SSL encrypted domain authenticated IIS6 server. However, I hit one hurdle and one roadblock still remains.

First the hurdle: after updating the NuGet.Server package, I went back into package manager and noticed that updates were available for Ninject, WebActivator and RouteMagic. Whilst WebActivator and RouteMagic appear OK, Ninject version 3 doesn't work with
NuGet.Server.
This is the exception thrown. So I would humbly suggest someone from team NuGet confirms this problem and if so locks the maximum Ninject version for NuGet.Server.

Now the roadblock: the only way I could get package restore to work successfully from a clean environment, i.e. no previous builds and no packages installed, was to explicitly set the -Source option. However, the default option from a standard
build (such as MSBuild foo.sln) seems to always passes -Source "".

If I took the nuget command line directly from the MSBuild output and changed -Source "" with -Source "https://foo.bar.com/nuget.server/nuget" and ran it separately, then I get prompted for credentials and the packages are restored as expected (yay!). So
it's very close to working. I tried manually setting the solution's .\nuget\NuGet.Config so that it contained the package source:

I think we have a bug when it comes to reading the packageSources value from the local nuget.confg file. But for now, you should be able to specify the sources in your NuGet.Settings.Target file (there's a PackageSources Property that accepts semi-colon
separated value) which should work.